Analysis

  • max time kernel
    140s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 09:05

General

  • Target

    YY5331过非法VE/emptyprocess.exe

  • Size

    43KB

  • MD5

    40142e93aafee7a1d84dcc9d023c1b41

  • SHA1

    3d8f0dfa47da722e07bd7c6226daeaff4b2960d9

  • SHA256

    d81579d4701acf59dcfe0e278ebedf9afb7a3261bd561117d0b3d7a67c5ea939

  • SHA512

    369508f4cecb745d44454dd37992187119378ca8f788b6f17f93ed4c8f172f3a1710762dec2f0860f26db77d6ec7c70ac17635c03d4b1af3e8ed88e00c955677

  • SSDEEP

    768:HppnF5/ija+1IORNba3wFaEhXAaxyzirdQ9mTdYnL7BGB/o414liqDvy8x:HpJWxahknxymTSK7Jwvbx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\YY5331过非法VE\emptyprocess.exe
    "C:\Users\Admin\AppData\Local\Temp\YY5331过非法VE\emptyprocess.exe"
    1⤵
      PID:2884

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2884-0-0x0000000000400000-0x0000000000415000-memory.dmp

      Filesize

      84KB